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LISTING OF THE CLAIMS: 

This listing of claims replaces all prior versions, and listings, of claims in the application: 



1 1. (Currently amended) A method comprising: 

2 reading from a software module embedding one of a set of key associated with a 

3 trusted source; 

4 determining whether a key is traceable to one of [[a]]the set of keys a ss ociated with a 

5 tru s ted s ource ; 

6 determining whether the key is identified in a list of compromised keys; and 

7 if the key is not identified as compromised and is traceable to one of the keys in the set, 

8 assigning the key a trusted status. 

1 2. (Original) The method of claim 1 further comprising: 

2 verifying the integrity of a document comprising the key and the list of compromised 

3 keys. 

1 3. (Cancelled) 



2 . 

1 4. (Original) The method of claim 1 in which determining whether the key is traceable to one of 

2 the set of keys further comprises: 

3 tracing the key through a certificate chain to one of the keys in the set of keys. 
1 5. (Original) The method of claim 1 further comprising: 



Page 2 of 11 




Appl. No; 09/397,455 " Attorney Docket: 042390.P6764 

2 associating a document comprising the key and the set of keys with a software module 

3 comprising the set of keys using a hash of the software module in the document. 

1 6. (Original) The method of claim 2 in which the document is a manifest signed by the key. 

1 7. (Original) The method of claim 1 in which determining whether the key is identified in the list 

2 of compromised keys further comprises: 

3 searching the list of compromised keys for the key. 

1 8. (Original) A method comprising: 

2 producing a document comprising an identification of a software module and a list of 

3 compromised keys; and 

4 digitally signing the document using a key traceable to one of a set of keys comprised by 

5 the software module. 

1 9. (Original) The method of claim 8 in which the identification of the software module comprises 

2 a hash value of the software module. 

1 10. (Original) The method of claim 8 in which the key is traceable to one of the set of keys 

2 comprised by the software module by way of a certificate chain. 

1 11. (Original) The method of claim 8 further comprising: 
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2 making the document available on a communication network by which computer systems 

3 comprising the software module may read the document. 



1 12. (Original) The method of claim 8 in which the set of keys is embedded within the software 

2 module. 



1 13. (Original) A device comprising: 

2 a processor; 

3 a machine-readable storage medium coupled to the processor by way of a bus, the storage 

4 medium storing instructions which, when executed by the processor, cause the device to 

5 determine whether a key is traceable to one of a set of keys associated with a trusted source; 

6 determine whether the key is identified in a list of compromised keys; and 

7 if the key is not identified as compromised and is traceable to one of the keys in the set, 

8 assign the key a trusted status. 



1 14. (Original) The device of claim 13 in which the instructions, when executed by the device, 

2 further cause the device to: 

3 verify the integrity of a document comprising the key and the Hst of keys. 



1 15. (Original) The device of claim 13 further comprising a software module comprising the list 

2 of keys. 
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1 16, (Original) The device of claim 13 in which the instructions, when executed by the device, 

2 further cause the device to: 

3 trace the new key through a certificate chain to one of the keys in the set of keys. 



1 17. (Original) A device comprising: 

2 a processor; 

3 a machine-readable storage medium coupled to the processor by way of a bus, the storage 

4 medium storing instructions which, when executed by the processor, cause the device to: 

5 produce a document comprising an identification of a software module and a list of 

6 compromised keys; and 

7 digitally sign the document using a key traceable to one of a set of keys comprised by the 

8 software module. 



1 18. (Original) The device of claim 17 in which the identification of the software module 

2 comprises a hash value of the software niodule. 



1 19. (Original) The device of claim 17 in which the key is traceable to one of the set of keys 

2 comprised by the software module by way of a certificate chain. 



1 20. (Currently Amended) An article comprising a machine-readable medium having stored 

2 thereon instructions which, when executed by a processor, result in: 

3 reading from a software module embedding one of a set of key associated with a trusted 

4 source; 
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5 determining whether a key is traceable to one of [[a]]the set of keys a s sociated with a tru s ted 

6 sewee; 

7 determining whether the key is identified in a hst of compromised keys; and 

8 if the key is not identified as compromised and is traceable to one of the trusted keys, assigning 

9 the key a trusted status. 

1 21. (Original) The article of claim 20 in which the instructions, when executed by the processor, 

2 further result in: 

3 verifying the integrity of a document comprising the key and the list of keys. 

1 22. (Original) The article of claim 20 further comprising a software module embedding the set of 

2 keys associated with the trusted source. 

1 23. (Currently Amended) The devieearticle of claim 20 in which the sequence of instructions, 

2 when executed by the processor, further result in: 

3 tracing the key through a certificate chain to one of the keys in the set of keys. 

1 24. (Original) An article comprising a machine-readable medium having stored thereon 

2 instructions which, when executed by a processor, result in: 

3 producing a document comprising an identification of a software module and a list of 

4 compromised keys; and 

5 digitally signing the document using a key traceable to one of a set of keys comprised by 

6 the software module. 
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25. (Original) The article of claim 24 in which the identification of the software module 
comprises a hash value of the software module. 

26. (Original) The article of claim 24 in which the key is traceable by way of a certificate chain 
to one of the set of keys embedded in the software module. 



Page 7 of 11 



